Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2768▼ 428 respecto a la semana anterior
Críticas / altas1324▼ 116 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)265▼ 243 respecto a la semana anterior
309 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (8.8) | 28% | — | Cisco Secure Firewall Threat DefenseCisco Adaptive Security Appliance Software | 3/5/2022 | 11/8/2026 | A vulnerability in the web services interface for remote access VPN features of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, but unprivileged, remote attacker to elevate privileges to level 15. This vulnerability is due to improper… | |
| Modificada | Alta (7.5) | 1.3% | — | Cisco Secure Firewall Threat Defense | 3/5/2022 | 11/8/2026 | A vulnerability in the connection handling function in Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper traffic handling when platform limits are reached. An attacker… | |
| Modificada | Alta (7.5) | 1.4% | — | Cisco Secure Firewall Threat Defense | 3/5/2022 | 11/8/2026 | A vulnerability in the Snort detection engine integration for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause unlimited memory consumption, which could lead to a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient… | |
| Modificada | Media (5.3) | 1.3% | — | Cisco Secure Firewall Threat Defense | 3/5/2022 | 11/8/2026 | A vulnerability in the local malware analysis process of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the affected device. This vulnerability is due to insufficient error handling in the local malware analysis process of… | |
| Modificada | Alta (7.5) | 1.4% | — | Cisco Secure Firewall Threat Defense | 3/5/2022 | 11/8/2026 | A vulnerability in the TCP proxy functionality of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. This vulnerability is due to improper handling of TCP flows. An attacker could exploit this vulnerability by sending a crafted… | |
| Modificada | Alta (7.5) | 1.5% | — | Cisco Secure Firewall Threat DefenseCisco Adaptive Security Appliance Software | 3/5/2022 | 11/8/2026 | A vulnerability in the web services interface for remote access VPN features of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to improper input… | |
| Modificada | Alta (7.4) | 0.46% | — | Cisco Secure Firewall Threat DefenseCisco Adaptive Security Appliance Software | 3/5/2022 | 11/8/2026 | A vulnerability in an IPsec VPN library of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to read or modify data within an IPsec IKEv2 VPN tunnel. This vulnerability is due to an improper implementation of… | |
| Modificada | Alta (7.5) | 0.99% | — | Cisco Secure Firewall Threat Defense | 3/5/2022 | 11/8/2026 | A vulnerability in the Security Intelligence feed feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass the Security Intelligence DNS feed. This vulnerability is due to incorrect feed update processing. An attacker could exploit this vulnerability by sending… | |
| Modificada | Alta (7.8) | 0.27% | — | Cisco Secure Firewall Threat Defense | 3/5/2022 | 11/8/2026 | A vulnerability in CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to inject XML into the command parser. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by including crafted input in commands. A successful… | |
| Modificada | Alta (8.6) | 1.4% | — | Cisco Secure Firewall Threat DefenseCisco Adaptive Security Appliance Software | 3/5/2022 | 11/8/2026 | A vulnerability in the remote access SSL VPN features of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper… | |
| Modificada | Alta (7.5) | 0.70% | — | Cisco Adaptive Security ApplianceCisco Adaptive Security Appliance SoftwareCisco Secure Firewall Threat Defense | 21/4/2022 | 11/8/2026 | A vulnerability in the implementation of the Datagram TLS (DTLS) protocol in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause high CPU utilization, resulting in a denial of service (DoS) condition. This… | |
| Modificada | Alta (7.5) | 1.3% | — | Cisco Secure Firewall Threat DefenseCisco Adaptive Security Appliance Software | 11/1/2022 | 11/8/2026 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. This vulnerability is due to improper input validation when parsing HTTPS… | |
| Modificada | Alta (7.5) | 1.3% | — | Cisco Adaptive Security ApplianceCisco Secure Firewall Threat DefenseCisco Adaptive Security Appliance Software | 11/1/2022 | 11/8/2026 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. This vulnerability is due to improper input validation when parsing HTTPS… | |
| Analizada | Crítica (10) | 100% | ⚠ Explotación activa💥 Exploit | Siemens 6bk1602-0aa12-0tp0 FirmwareSiemens 6bk1602-0aa22-0tp0 FirmwareSiemens 6bk1602-0aa32-0tp0 FirmwareSiemens 6bk1602-0aa42-0tp0 Firmware+139 | 10/12/2021 | 11/8/2026 | Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can… | |
| Modificada | Media (6.5) | 1.0% | — | Cisco Secure Firewall Threat DefenseCisco Adaptive Security Appliance SoftwareCisco ASA 5512-x FirmwareCisco ASA 5505 Firmware+6 | 27/10/2021 | 11/8/2026 | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to trigger a denial of service (DoS) condition on an affected device. This vulnerability is… | |
| Modificada | Alta (7.5) | 1.4% | — | Cisco Adaptive Security ApplianceCisco Secure Firewall Threat DefenseCisco Adaptive Security Appliance SoftwareCisco ASA 5512-x Firmware+7 | 27/10/2021 | 11/8/2026 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. This vulnerability is due to improper input validation when parsing HTTPS… | |
| Modificada | Alta (7.5) | 1.5% | — | Cisco Adaptive Security ApplianceCisco Secure Firewall Threat DefenseCisco Adaptive Security Appliance SoftwareCisco ASA 5512-x Firmware+7 | 27/10/2021 | 11/8/2026 | A vulnerability in SSL/TLS message handler for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability exists because incoming SSL/TLS… | |
| Modificada | Alta (7.5) | 1.4% | — | Cisco Secure Firewall Management CenterCisco Secure Firewall Threat DefenseCisco Snort | 27/10/2021 | 11/8/2026 | Multiple Cisco products are affected by a vulnerability in Snort rules that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.The vulnerability is due to improper handling of the Block with Reset or Interactive Block with Reset actions if a rule is… | |
| Modificada | Alta (7.5) | 2.5% | — | Cisco Secure Firewall Management CenterCisco Secure Firewall Threat DefenseCisco Unified Threat DefenseSnort | 27/10/2021 | 11/8/2026 | Multiple Cisco products are affected by a vulnerability in the way the Snort detection engine processes ICMP traffic that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper memory resource management while the Snort… | |
| Modificada | Media (5.3) | 0.94% | — | Cisco Secure Firewall Threat DefenseCisco Adaptive Security Appliance SoftwareCisco ASA 5512-x FirmwareCisco ASA 5505 Firmware+6 | 27/10/2021 | 11/8/2026 | A vulnerability in the Simple Network Management Protocol version 3 (SNMPv3) access control functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to query SNMP data. This vulnerability is due to ineffective… | |
| Modificada | Alta (8.6) | 0.59% | — | Cisco Adaptive Security ApplianceCisco Secure Firewall Threat DefenseCisco Adaptive Security Appliance SoftwareCisco ASA 5512-x Firmware+7 | 27/10/2021 | 11/8/2026 | A vulnerability in the TCP Normalizer of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software operating in transparent mode could allow an unauthenticated, remote attacker to poison MAC address tables, resulting in a denial of service (DoS) vulnerability. This vulnerability is… | |
| Modificada | Alta (7.5) | 1.4% | — | Cisco Secure Firewall Threat DefenseCisco Adaptive Security Appliance SoftwareCisco ASA 5512-x FirmwareCisco ASA 5505 Firmware+6 | 27/10/2021 | 11/8/2026 | A vulnerability in the memory management of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper resource management when… | |
| Modificada | Media (5.3) | 1.1% | — | Cisco Adaptive Security ApplianceCisco Secure Firewall Threat DefenseCisco Adaptive Security Appliance SoftwareCisco ASA 5512-x Firmware+7 | 27/10/2021 | 11/8/2026 | Multiple vulnerabilities in the Application Level Gateway (ALG) for the Network Address Translation (NAT) feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass the ALG and open unauthorized connections with a… | |
| Modificada | Media (5.3) | 1.1% | — | Cisco Adaptive Security ApplianceCisco Secure Firewall Threat DefenseCisco Adaptive Security Appliance SoftwareCisco ASA 5512-x Firmware+7 | 27/10/2021 | 11/8/2026 | Multiple vulnerabilities in the Application Level Gateway (ALG) for the Network Address Translation (NAT) feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass the ALG and open unauthorized connections with a… | |
| Modificada | Media (5.3) | 1.0% | — | Cisco Adaptive Security ApplianceCisco Secure Firewall Threat DefenseCisco Adaptive Security Appliance SoftwareCisco ASA 5512-x Firmware+7 | 27/10/2021 | 11/8/2026 | A vulnerability in the identity-based firewall (IDFW) rule processing feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass security protections. This vulnerability is due to improper handling of network… |